Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:28268
HistoryDec 06, 2020 - 3:49 a.m.

Denial Of Service (DoS)

2020-12-0603:49:03
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON

tdom is vulnerable to denial of service. A buffer overflow in the big2_toUtf8 function in lib/xmltok.c allows a context-dependent attacker to crash the application via a malicious XML document containing malformed UTF-8 sequences.

References

Related

nessus 68
openvas 57
debian 5
osv 2
freebsd 3
seebug 1
httpd 2
oraclelinux 1
centos 1
fedora 3
redhat 3
f5 2
ubuntucve 1
cve 1
slackware 2
ubuntu 6
prion 1
debiancve 1
gentoo 1
kaspersky 1
apple 4
vmware 4
nessus
nessus
Fedora 11 : expat-2.0.1-8.fc11 (2009-12716)
2009-12-07 00:00:00
SuSE9 Security Update : expat (YOU Patch Number 12568)
2010-01-15 00:00:00
SuSE 10 Security Update : expat (ZYPP Patch Number 6764)
2010-01-15 00:00:00
openvas
openvas
SLES11: Security update for expat
2009-12-14 00:00:00
FreeBSD Ports: expat2
2009-12-10 00:00:00
FreeBSD Ports: expat2
2009-12-10 00:00:00
debian
debian
[SECURITY] [DSA-1953-2] New expat packages fix regression
2009-12-31 14:15:48
[SECURITY] [DSA-1953-2] New expat packages fix regression
2009-12-31 14:15:48
[SECURITY] [DSA-1953-1] New expat packages fix denial of service
2009-12-15 20:23:03
osv
osv
expat - regression fix
2009-12-15 00:00:00
python - several vulnerabilities
2010-01-25 00:00:00
freebsd
freebsd
expat2 -- buffer over-read and crash
2009-10-05 00:00:00
apr -- multiple vunerabilities
2010-10-02 00:00:00
libwww -- multiple vulnerabilities
2005-10-12 00:00:00
seebug
seebug
expat big2_toUtf8()函数XMLζ–‡δ»Άθ§£ζžζ‹’η»ζœεŠ‘ζΌζ΄ž
2009-12-24 00:00:00
httpd
httpd
Apache Httpd < 2.0.64 : expat DoS
2009-12-18 00:00:00
Apache Httpd < 2.2.17 : expat DoS
2009-12-18 00:00:00
oraclelinux
oraclelinux
expat security update
2009-12-07 00:00:00
centos
centos
expat security update
2009-12-07 23:34:29
fedora
fedora
[SECURITY] Fedora 11 Update: expat-2.0.1-8.fc11
2009-12-05 00:02:48
[SECURITY] Fedora 10 Update: expat-2.0.1-8.fc10
2009-12-04 23:57:13
[SECURITY] Fedora 12 Update: expat-2.0.1-8.fc12
2009-12-05 00:06:09
redhat
redhat
(RHSA-2009:1625) Moderate: expat security update
2009-12-07 00:00:00
(RHSA-2017:3239) Important: Red Hat JBoss Enterprise Application Platform 6.4.18 security update
2017-11-16 19:09:33
(RHSA-2009:1692) Important: rhev-hypervisor security and bug fix update
2009-12-23 00:00:00
f5
f5
K15905 : Expat vulnerabilities CVE-2009-3560 and CVE-2009-3720
2015-03-16 00:00:00
SOL15905 - Expat vulnerabilities CVE-2009-3560 and CVE-2009-3720
2014-12-11 00:00:00
ubuntucve
ubuntucve
CVE-2009-3560
2009-12-04 00:00:00
cve
cve
CVE-2009-3560
2009-12-04 21:30:00
slackware
slackware
[slackware-security] expat
2011-02-11 01:17:08
[slackware-security] httpd
2011-02-11 01:17:26
ubuntu
ubuntu
PyXML vulnerabilities
2010-01-26 00:00:00
Expat vulnerabilities
2010-01-20 00:00:00
XML-RPC for C and C++ vulnerabilities
2010-02-18 00:00:00
prion
prion
Buffer overflow
2009-12-04 21:30:00
debiancve
debiancve
CVE-2009-3560
2009-12-04 21:30:00
gentoo
gentoo
Expat: Multiple vulnerabilities
2012-09-24 00:00:00
kaspersky
kaspersky
KLA10066 Multiple vulnerabilities in Apache httpd
2010-10-19 00:00:00
apple
apple
About the security content of iTunes 12.6
2017-03-21 00:00:00
About the security content of iTunes 12.6 - Apple Support
2017-03-22 07:40:40
About the security content of iTunes 12.6 for Windows
2017-03-21 00:00:00
vmware
vmware
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
ESX Service Console and vMA third party updates
2010-03-03 00:00:00
VMware ESXi and ESX updates to third party library and ESX Service Console
2012-01-30 00:00:00

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

JSON
Related for VERACODE:28268
nessus68openvas57debian5osv2freebsd3seebug1httpd2oraclelinux1centos1fedora3redhat3f52ubuntucve1cve1slackware2ubuntu6prion1debiancve1gentoo1kaspersky1apple4vmware4